Tag: data-breach
-
CodeQLEAKED: GitHub Supply Chain Attack Enables Code Execution via CodeQL Repositories
A recent discovery has revealed a potential supply chain attack vulnerability in GitHub’s CodeQL repositories, which could have led to wide-ranging consequences for hundreds of thousands of GitHub users. The exploit hinges on a publicly exposed secret found in a GitHub Actions workflow artifact, which, if utilized by an attacker, could allow malicious code execution…
-
Advanced Fined 3 Million Pounds Over 2022 Ransomware Hack
UK ICO Says Advanced’s Security Measures ‘Fell Seriously Short’. A British IT service company must pay a 3.07 million pound fine for a 2022 ransomware hack that exposed medical records of tens of thousands of National Health Service patients. Hackers breached the Advanced system through a user account that did not have multifactor authentication in…
-
UK fines software provider £3.07 million for 2022 ransomware breach
The UK Information Commissioner’s Office (ICO) has fined Advanced Computer Software Group Ltd £3.07 million over a 2022 ransomware attack that exposed the sensitive personal data of 79,404 people, including National Health Service (NHS) patients. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/uk-fines-software-provider-307-million-for-2022-ransomware-breach/
-
Domestic violence survivors urged to take safety precautions after NSW justice department data breach
Attorney general says hacker gained unlawful entry to state’s Justice Link system and accessed 9,000 files, which could include victim details<ul><li><a href=”https://www.theguardian.com/australia-news/live/2025/mar/27/australia-politics-live-fuel-excise-cost-of-living-tax-cuts-salmon-election-anthony-albanese-peter-dutton-ntwnfb”>Follow our Australia news live blog for latest updates</li><li>Get our <a href=”https://www.theguardian.com/email-newsletters?CMP=cvau_sfl”>breaking news email, <a href=”https://app.adjust.com/w4u7jx3″>free app or <a href=”https://www.theguardian.com/australia-news/series/full-story?CMP=cvau_sfl”>daily news podcast</li></ul>Domestic and family violence victim-survivors who are concerned their safety may have been…
-
Mike Waltz Left His Venmo Friends List Public
Tags: data-breachA WIRED review shows national security adviser Mike Waltz, White House chief of staff Susie Wiles, and other top officials left sensitive information exposed via Venmo”, until WIRED asked about it. First seen on wired.com Jump to article: www.wired.com/story/michael-waltz-left-his-venmo-public/
-
Thousands of NSW court files including AVOs leaked in ‘major data breach’
Investigation under way after around 9,000 documents including sensitive affidavits exposed<ul><li><a href=”https://www.theguardian.com/australia-news/live/2025/mar/27/australia-politics-live-fuel-excise-cost-of-living-tax-cuts-salmon-election-anthony-albanese-peter-dutton-ntwnfb”>Follow our Australia news live blog for latest updates</li><li>Get our <a href=”https://www.theguardian.com/email-newsletters?CMP=cvau_sfl”>breaking news email, <a href=”https://app.adjust.com/w4u7jx3″>free app or <a href=”https://www.theguardian.com/australia-news/series/full-story?CMP=cvau_sfl”>daily news podcast</li></ul>About 9,000 court files, including sensitive documents such as apprehended violence orders and affidavits, have been leaked in a data breach of the…
-
StreamElements discloses third-party data breach after hacker leaks data
Cloud-based streaming company StreamElements confirms it suffered a data breach at a third-party service provider after a threat actor leaked samples of stolen data on a hacking forum. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/streamelements-discloses-third-party-data-breach-after-hacker-leaks-data/
-
Mit GenAI zum Insider-Threat
Tags: ai, best-practice, ciso, cloud, cyersecurity, data-breach, framework, infrastructure, injection, intelligence, mitre, password, risk, risk-management, technology, threat, toolViele Unternehmen haben nicht auf dem Schirm, welche Sicherheitsprobleme durch die Nutzung von GenAI entstehen.Einer Analyse von Netskope zufolge sind GenAI-Daten-Uploads in Unternehmen innerhalb eines Jahres um das 30-Fache gestiegen. Darunter befinden sich demnach auch sensible Informationen wie Quellcodes, regulierte Daten, Passwörter und Schlüssel sowie geistiges Eigentum.Zudem nutzen drei von vier Unternehmen Apps mit integrierten…
-
String of defects in popular Kubernetes component puts 40% of cloud environments at risk
Researchers aren’t aware of active exploitation in the wild, but they warn the risk for publicly exposed and unpatched Ingress Nginx controllers is extremely high. First seen on cyberscoop.com Jump to article: cyberscoop.com/kubernetes-nginx-controller-defects-wiz/
-
Do You Own Your Permissions, or Do Your Permissions Own You?
Tags: attack, computer, credentials, data, data-breach, exploit, microsoft, powershell, update, vulnerabilitytl;dr: Less FPs for Owns/WriteOwner and new Owns/WriteOwnerLimitedRights edges Before we get started, if you’d prefer to listen to a 10-minute presentation instead of or to supplement reading this post, please check out the recording of our most recent BloodHound Release Recap webinar. You can also sign up for future webinars here. Back in August, a…
-
How PAM Mitigates Insider Threats: Preventing Data Breaches, Privilege Misuse, and More
When people think of cybersecurity threats, they often picture external hackers breaking into networks. However, some of the most damaging breaches stem from within organizations. Whether through negligence or malicious intent, insiders can expose your organization to significant cybersecurity risks.According to Verizon’s 2024 Data Breach Investigations Report, 57% of companies experience over First seen on…
-
Hacker defaces NYU website, exposing admissions data on 1 million students
The hacker replaced the NYU homepage with charts and links to large student datasets categorizing standardized testing scores based on race, and also exposed vast amounts of personal information. First seen on therecord.media Jump to article: therecord.media/hacker-nyu-website-admissions-race
-
Numotion Data Breach Impacts Nearly 500,000 People
Email-related data breach suffered by wheelchair and other mobility equipment provider Numotion affects almost 500,000 individuals. The post Numotion Data Breach Impacts Nearly 500,000 People appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/numotion-data-breach-impacts-nearly-500000-people/
-
China-Linked Weaver Ant Hackers Exposed After Four-Year Telco Infiltration
Sygnia has uncovered Weaver Ant, a Chinese threat actor that spied on telecommunications networks for years First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/china-weaver-ant-hackers-telco/
-
Cyber-Zwischenfall bei einem Finanzdienstleister in Jamaika
Access Financial Services addresses data breach from cybersecurity incident First seen on jamaicaobserver.com Jump to article: www.jamaicaobserver.com/2025/03/24/access-financial-services-addresses-data-breach-cybersecurity-incident/
-
Datenschutzvorfall bei der Igus GmbH
Keine Ahnung, ob viele Nutzer bzw. Nutzerinnen aus der Leserschaft Kunden bei der Igus GmbH, einem Spezialhersteller von Produkten wie Kunststoffgleitlagern, Energieführungsketten etc. sind. Dort gab es eine Sicherheitslücke im CRM, was (mustergültig) zu einer Mitteilung über einen Datenschutzvorfall führte. … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/03/25/datenschutzvorfall-bei-der-igus-gmbh/
-
CloudSEK Disputes Oracle Over Data Breach Denial with New Evidence
Oracle is caught up in a cybersecurity mess right now, with claims about a massive data breach affecting… First seen on hackread.com Jump to article: hackread.com/cloudsek-disputes-oracle-data-breach-denial-evidence/
-
Wheelchair Firm Ramps Up Notices to 500,000 for Email Hack
Large Health Data Breach Started With Phishing Lure in Employees’ Email. Tennessee-based Numotion, one of the largest U.S. providers of wheelchairs and other health-related mobility products is notifying nearly 500,000 people of a 2024 email hacking incident that potentially compromised their personal and health-related information. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/wheelchair-firm-ramps-up-notices-to-500000-for-email-hack-a-27814
-
Widespread Keenetic Router Data Breach Uncovered
First seen on scworld.com Jump to article: www.scworld.com/brief/widespread-keenetic-router-data-breach-uncovered
-
Oracle Cloud Data Breach Claims Repudiated
First seen on scworld.com Jump to article: www.scworld.com/brief/oracle-cloud-data-breach-claims-repudiated
-
Massive Oracle Cloud Breach: 6M Records Exposed, 140k+ Tenants Risked
Oracle Cloud breach exposed 6M records from 140k+ tenants. Learn how attackers exploited vulnerabilities and steps organizations must take to secure data. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/trends/oracle-cloud-breach-6m-records-140k-tenants-risk/
-
Hackers steal sensitive data from Pennsylvania county during ransomware attack
The government of Union County in central Pennsylvania said a recent ransomware attack exposed information related to law enforcement and other government business. First seen on therecord.media Jump to article: therecord.media/union-county-pennsylvania-ransomware-attack
-
Four Members of Hacker Group Behind 90 Worldwide Data Breaches Exposed
A recent investigation by Group-IB has shed light on a notorious cybercriminal operating under multiple aliases, including ALTDOS, DESORDEN, GHOSTR, and 0mid16B. This individual was responsible for over 90 data breaches globally, primarily targeting companies in Asia and other regions. The threat actor’s modus operandi involved compromising internet-facing Windows servers, exfiltrating sensitive data, and extorting…
-
NTT Communications bestätigt potentielles Datenleck im Feb. 2025
Ein Blog-Leser hatte mich vor einigen Tagen auf eine Mitteilung von NTT Communications hingewiesen, in der Anfang März 2025 ein potentielles Informationsleck eingestanden wird. Es ist nicht das erste Mal, wo das Unternehmen so etwas bestätigt. Hier einige Informationen zu … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/03/24/ntt-communications-bestaetigt-potentielles-datenleck-im-feb-2025/
-
WordPress Plugin Vulnerability Opens Door to SQL Injection Exploits
A critical vulnerability in the popular WordPress plugin GamiPress has been uncovered, leaving users exposed to unauthenticated SQL injection attacks. The issue, assigned the identifier CVE-2024-13496, carries a high CVSS 3.1 score of 7.5, indicating significant potential for exploitation. CVE-2024-13496 was discovered during a security assessment of GamiPress version 7.2.1. The vulnerability affects all versions…
-
California AG Reminds 23andMe Customers of Data Deletion Rights Amid Bankruptcy Filing
Two years after a data breach that compromised almost seven million customers, 23andMe’s CEO has resigned as the company files for bankruptcy First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/california-23andme-data-rights/
-
Coinbase Initially Targeted in GitHub Actions Supply Chain Attack; 218 Repositories’ CI/CD Secrets Exposed
The supply chain attack involving the GitHub Action “tj-actions/changed-files” started as a highly-targeted attack against one of Coinbase’s open-source projects, before evolving into something more widespread in scope.”The payload was focused on exploiting the public CI/CD flow of one of their open source projects agentkit, probably with the purpose of leveraging it for further compromises,”…
-
Data breach refuted by Baidu after user info leak
First seen on scworld.com Jump to article: www.scworld.com/brief/data-breach-refuted-by-baidu-after-user-info-leak